FFe: Sync ipset 6.11-2 (universe) from Debian sid (main)

Bug #979682 reported by Oibaf
30
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Ubuntu
Fix Released
Wishlist
Unassigned

Bug Description

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu
 status new
 importance wishlist
 subscribe ubuntu-release
 done

Please sync ipset 6.11-2 (universe) from Debian sid (main)

Explanation of FeatureFreeze exception:
1) an obsolete and useless version (2.5) of ipset was included up to oneiric and the package was removed in precise;
2) this updated version reintroduce it and should fix most of ubuntu bugs: https://launchpad.net/ubuntu/+source/ipset/+bugs ;
3) I backported to precise, build log is here: https://launchpadlibrarian.net/101459561/buildlog_ubuntu-precise-i386.ipset_6.11-2~p_BUILDING.txt.gz ;
4) install log is attached;

Thanks!

All changelog entries:

ipset (6.11-2) unstable; urgency=low

  * Update debian/control
    * debian/control:
      - Bump Standards-Version to 3.9.3, no changes needed.
      - Change Architecture to linux-any as iptables only supports linux.
        (Closes: #647656 - uninstallable on kfreebsd-amd64)
      - Add iptables to ipset dependency.
  * Bump dh compat to 9
    * debian/compat, debian/control: Bump dh compat to 9.
    * debian/rules:
      - Simplify hardening build flags and multiarch support logic.
  * Update copyright format url to version 1.0

 -- Neutron Soutmun <email address hidden> Tue, 28 Feb 2012 09:56:38 +0700

ipset (6.11-1) unstable; urgency=low

  (Closes: #656343)

  [ Neutron Soutmun ]
  * Imported Upstream version 6.11
  * Switch to 3.0 (quilt) Debian source format
  * Update compat level and control files
    * debian/compat:
      - Bump compat level to 8.
    * debian/control:
      - Update me as the maintainer.
      - Bump Standards-Version to 3.9.2, no changes needed.
      - Add/update build-deps:
        * Update debhelper (>= 8.1.3~) and add dpkg-dev (>= 1.16.1~)
          to support multiarch builds and get hardening build flags on
          dpkg-buildflags is being invoked.
        * Add dh-autoreconf.
        * libmnl-dev which is required by ipset utility.
        * Add pkg-config which is required by configure script to check
          whether the libmnl has already been installed.
      - Add Homepage.
      - Add Vcs-{Browser,Git} point to Alioth.
      - The ipset package should conflicts the xtables-addons-common which
        also provides the ipset utility binary.
      - Add more packages:
        * libipset-dev, libipset2 which provide the runtime/development
          libraries and header files. (MultiArch supported)
      - Update the descriptions.
    * debian/control.modules:
      - Drop as the ipset already included in the mainline kernel, no needs
        to build as the modules.
    * debian/README.Debian:
      - Drop outdated Debian readme file.
  * Update rules and drop rules.modules
    * debian/rules:
      - Using new debhelper build rules set.
      - Get DEB_HOST_MULTIARCH which is required by libipset for MultiArch
        support.
      - Set hardening build flags by using dpkg-buildflags to exports the
        compilation flags and override the dh_auto_configure.
      - Set --libdir to comply with MultiArch by using DEB_HOST_MULTIARCH.
    * debian/rules.modules:
      - Drop as unneeded.
  * Add installation files for each package
    * debian/ipset.{install,docs,manpages}:
      - Install binary, documents and manpages.
    * debian/libipset{2,-dev}:
      - Install runtime/development libraries and header files.
  * Update copyright file to DEP-5 format
  * Add patch to build ipset against shared libs
    * debian/patches/99-ipset-shared-libs.patch, debian/patches/series:
      - Add patch.
  * Drop unnecessary lintian override file
  * Add watch file
  * Drop unused override_dh_auto_clean from rules

  [ Dmitry Smirnov <email address hidden> ]
  * debian/copyright: correct DEP-5 format URL
  * preparing for coordinated upload with xtables-addons 1.41
  * adding forgotten debian/changelog
  * tightening depends on libipset
  * adding libmnl-dev to libipset-dev build-deps

 -- Neutron Soutmun <email address hidden> Sat, 04 Feb 2012 14:44:50 +0700

ipset (2.5.0-1) unstable; urgency=low

  * New upstream release; closes: #503683.
  * Ship ipset-source kernel modules package.

 -- Robert S. Edmonds <email address hidden> Sat, 09 May 2009 18:17:13 -0400

ipset (2.3.3-1) unstable; urgency=low

  * New upstream release; closes: #481382.

 -- Robert S. Edmonds <email address hidden> Sat, 19 Jul 2008 20:56:33 -0400

ipset (2.3.0-1) unstable; urgency=low

  * New upstream release with iptreemap support; closes: #445389.

 -- Robert S. Edmonds <email address hidden> Mon, 08 Oct 2007 12:09:11 -0400

ipset (2.2.9a-1) unstable; urgency=low

  * New upstream release which removes dependencies on kernel headers;
    closes: #389860.

 -- Robert S. Edmonds <email address hidden> Sat, 14 Oct 2006 22:10:46 -0400

ipset (2.2.9-1) unstable; urgency=low

  * Initial release, closes: #380148.
  * Header files from patch-o-matic-ng were extracted from netfilter.org
    sources and placed in the ipset source package to avoid the need for an
    extracted Linux kernel tree with the ipset patches in order to build.

 -- Robert S. Edmonds <email address hidden> Sun, 27 Aug 2006 13:56:39 -0400
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk+GlNYACgkQ+zwqqQYiYIrQPACgq3T0sgHxEYP+8JaduBBtwbbM
TjEAoKVHaqaY/dl0QUT3R6soWcDdjeRO
=Lmgr
-----END PGP SIGNATURE-----

Revision history for this message
Oibaf (oibaf) wrote :
description: updated
Revision history for this message
Iain Lane (laney) wrote :

What testing have you done?

Revision history for this message
Oibaf (oibaf) wrote :

I have to say I did very few testing, just running the binary, I didn't try IP sets.

Note that 6.11 is the latest upstream version and since linux 2.6.39 the kernel support is available upstream (and included in Ubuntu kernel):
http://kernelnewbies.org/Linux_2_6_39#head-2c00f927acbce350384353cce9225b390e17e5ca

I could not do more testing until next week. Actually I just suppose all works as it should...

Revision history for this message
Oibaf (oibaf) wrote :

OK, I tested it properly this time and it works well. It would be nice to have it, it is very useful on firewalls.

Here is a snippet of my tests:

$ ipset --version
ipset v6.11, protocol version: 6
$ ping 192.168.2.2
PING 192.168.2.2 (192.168.2.2) 56(84) bytes of data.
^C
--- 192.168.2.2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 5.876/5.876/5.876/0.000 ms
$ sudo ipset list
$ sudo ipset -N test nethash
$ sudo ipset list
Name: test
Type: hash:net
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 8532
References: 0
Members:
$ sudo ipset -A test 192.168.2.2
$ sudo ipset list
Name: test
Type: hash:net
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 8564
References: 0
Members:
192.168.2.2
$ sudo iptables -A INPUT -m set --match-set test src -j DROP
$ ping 192.168.2.2
PING 192.168.2.2 (192.168.2.2) 56(84) bytes of data.
^C
--- 192.168.2.2 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2015ms
$

Revision history for this message
Iain Lane (laney) wrote :

Ack. Approved.

Sponsoring.

Changed in ubuntu:
status: New → Fix Committed
Revision history for this message
Iain Lane (laney) wrote :
Download full text (4.5 KiB)

This bug was fixed in the package ipset - 6.11-2
Sponsored for Fabio Pedretti (oibaf)

---------------
ipset (6.11-2) unstable; urgency=low

  * Update debian/control
    * debian/control:
      - Bump Standards-Version to 3.9.3, no changes needed.
      - Change Architecture to linux-any as iptables only supports linux.
        (Closes: #647656 - uninstallable on kfreebsd-amd64)
      - Add iptables to ipset dependency.
  * Bump dh compat to 9
    * debian/compat, debian/control: Bump dh compat to 9.
    * debian/rules:
      - Simplify hardening build flags and multiarch support logic.
  * Update copyright format url to version 1.0

 -- Neutron Soutmun <email address hidden> Tue, 28 Feb 2012 09:56:38 +0700

ipset (6.11-1) unstable; urgency=low

  (Closes: #656343)

  [ Neutron Soutmun ]
  * Imported Upstream version 6.11
  * Switch to 3.0 (quilt) Debian source format
  * Update compat level and control files
    * debian/compat:
      - Bump compat level to 8.
    * debian/control:
      - Update me as the maintainer.
      - Bump Standards-Version to 3.9.2, no changes needed.
      - Add/update build-deps:
        * Update debhelper (>= 8.1.3~) and add dpkg-dev (>= 1.16.1~)
          to support multiarch builds and get hardening build flags on
          dpkg-buildflags is being invoked.
        * Add dh-autoreconf.
        * libmnl-dev which is required by ipset utility.
        * Add pkg-config which is required by configure script to check
          whether the libmnl has already been installed.
      - Add Homepage.
      - Add Vcs-{Browser,Git} point to Alioth.
      - The ipset package should conflicts the xtables-addons-common which
        also provides the ipset utility binary.
      - Add more packages:
        * libipset-dev, libipset2 which provide the runtime/development
          libraries and header files. (MultiArch supported)
      - Update the descriptions.
    * debian/control.modules:
      - Drop as the ipset already included in the mainline kernel, no needs
        to build as the modules.
    * debian/README.Debian:
      - Drop outdated Debian readme file.
  * Update rules and drop rules.modules
    * debian/rules:
      - Using new debhelper build rules set.
      - Get DEB_HOST_MULTIARCH which is required by libipset for MultiArch
        support.
      - Set hardening build flags by using dpkg-buildflags to exports the
        compilation flags and override the dh_auto_configure.
      - Set --libdir to comply with MultiArch by using DEB_HOST_MULTIARCH.
    * debian/rules.modules:
      - Drop as unneeded.
  * Add installation files for each package
    * debian/ipset.{install,docs,manpages}:
      - Install binary, documents and manpages.
    * debian/libipset{2,-dev}:
      - Install runtime/development libraries and header files.
  * Update copyright file to DEP-5 format
  * Add patch to build ipset against shared libs
    * debian/patches/99-ipset-shared-libs.patch, debian/patches/series:
      - Add patch.
  * Drop unnecessary lintian override file
  * Add watch file
  * Drop unused override_dh_auto_clean from rules

  [ Dmitry Smirnov <email address hidden> ]
  * debian/copyright: correct DEP-5 format U...

Read more...

Changed in ubuntu:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.